Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier: oZPo+coOQ3y3kOr3hj32axw6mYV+VXYpiNj6LVT4Zb8=
Subject key identifier: 1D:8E:97:FF:73:24:1F:29:CB:B6:85:60:1F:F5:02:79:0E:5D:E9:2B
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial: 0199FE7DF4A4351B42365916AA347E428AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number: 0A53
Signing time: Sun 19 Oct 2025 22:01:31 +0000
Manifest this update: Sun 19 Oct 2025 22:01:31 +0000
Manifest next update: Mon 20 Oct 2025 22:01:31 +0000
Files and hashes: 1: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: Z3LSh32lLs/ns3Z6TNeN226z6HmQs4UnHYheIVKFbbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:f4:a4:35:1b:42:36:59:16:aa:34:7e:42:8a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Validity
Not Before: Oct 19 22:01:31 2025 GMT
Not After : Oct 20 22:01:31 2025 GMT
Subject: CN=1d8e97ff73241f29cbb685601ff502790e5de92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:4b:df:0b:ae:41:2e:28:b7:6a:8e:d3:f2:
f0:e3:b0:b2:3e:75:aa:84:14:ee:b3:fb:ca:25:51:
52:81:57:79:8c:06:ce:a5:f1:fd:28:49:cb:db:69:
b3:f8:b4:62:b5:bc:65:99:43:1c:a3:11:04:e5:2d:
3d:80:da:3d:42:b0:6e:7b:f4:4a:00:04:7e:79:0d:
e3:0c:00:55:91:9e:b4:14:6b:1f:23:cd:c9:a8:b5:
bb:dd:bd:4c:80:42:25:f5:a0:ef:fa:cc:83:a2:80:
e3:d0:c8:76:45:69:bb:a0:2a:f2:62:9a:84:2e:a0:
61:15:0b:c7:be:f8:80:5c:81:0f:d6:f2:39:6f:e0:
4b:c2:5b:e3:21:17:a4:d8:68:a0:de:a9:cd:4c:dc:
8d:7f:2c:ec:13:12:14:d5:9f:c1:20:89:4a:0b:fd:
33:ef:0b:ea:43:66:b1:6b:e5:0d:7e:fc:0d:9a:01:
11:c8:c8:9c:ae:3e:ac:d4:2e:bd:cb:d2:52:87:81:
34:b9:9e:d8:a0:c7:3a:98:f9:78:37:39:0a:e2:b8:
f1:9c:fd:d9:b9:d7:fb:d9:d8:64:13:ec:22:44:50:
b6:3c:a8:34:f6:1a:3c:5f:db:6a:b8:d5:a6:2c:1e:
01:c1:e1:9c:78:7c:a4:cd:0e:c4:45:5f:6e:82:96:
64:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8E:97:FF:73:24:1F:29:CB:B6:85:60:1F:F5:02:79:0E:5D:E9:2B
X509v3 Authority Key Identifier:
keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a1:6e:5d:b2:15:56:ec:33:d1:5e:26:56:9f:af:ba:bc:74:
09:c6:b6:f0:a9:6d:c8:d5:51:9e:e2:f8:c6:59:e7:ae:96:88:
df:f2:8b:34:df:d1:f7:30:7b:4c:ef:22:ed:59:70:aa:bb:c7:
9c:88:b8:35:ea:fd:4c:ac:7d:46:25:ea:2e:29:e9:27:c1:0a:
2d:8a:c1:c2:ad:92:5a:18:3d:af:a9:2f:cb:44:91:b1:19:23:
87:29:36:df:f8:93:0a:af:45:3a:85:6b:ff:3a:9a:ed:6e:0d:
75:4b:9e:2b:28:79:6f:01:50:ee:67:19:eb:4f:f5:74:7d:5c:
27:2e:94:5e:2b:c1:b3:d5:a8:c2:89:2d:ab:5d:63:19:d2:cb:
21:76:5b:c7:18:5e:b3:85:75:20:a2:93:36:0a:ed:88:1c:33:
d9:19:2f:1f:e4:54:20:a4:e2:8f:ed:07:8d:36:50:dd:16:ab:
c7:25:02:73:c3:d4:27:da:0e:3d:b7:08:fe:04:c6:7e:c5:da:
d1:22:ac:65:62:15:43:03:e0:ea:4d:25:5b:cd:37:a5:cd:58:
78:4e:8a:32:bf:fd:df:21:c6:9f:18:a8:9c:fb:55:71:16:c9:
82:ed:4c:88:77:1c:16:e7:34:01:6c:f3:b8:1e:19:28:78:90:
ca:20:2a:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+ffSkNRtCNlkWqjR+QorvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTI3YTFjZTc3YmNkNGM2NDk3ZTI4NWJmMmJhNmYzMjQ0
MzllYjgwHhcNMjUxMDE5MjIwMTMxWhcNMjUxMDIwMjIwMTMxWjAzMTEwLwYDVQQD
EygxZDhlOTdmZjczMjQxZjI5Y2JiNjg1NjAxZmY1MDI3OTBlNWRlOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN9L3wuuQS4ot2qO0/Lw47CyPnWq
hBTus/vKJVFSgVd5jAbOpfH9KEnL22mz+LRitbxlmUMcoxEE5S09gNo9QrBue/RK
AAR+eQ3jDABVkZ60FGsfI83JqLW73b1MgEIl9aDv+syDooDj0Mh2RWm7oCryYpqE
LqBhFQvHvviAXIEP1vI5b+BLwlvjIRek2Gig3qnNTNyNfyzsExIU1Z/BIIlKC/0z
7wvqQ2axa+UNfvwNmgERyMicrj6s1C69y9JSh4E0uZ7YoMc6mPl4NzkK4rjxnP3Z
udf72dhkE+wiRFC2PKg09ho8X9tquNWmLB4BweGceHykzQ7ERV9ugpZkuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2Ol/9zJB8py7aFYB/1AnkOXekrMB8GA1UdIwQY
MBaAFHDiehzne81MZJfihb8rpvMkQ564MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2Mt
MGJlYzk2Nzg3OTM3LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2MtMGJlYzk2Nzg3OTM3
LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6FuXbIV
Vuwz0V4mVp+vurx0Cca28KltyNVRnuL4xlnnrpaI3/KLNN/R9zB7TO8i7VlwqrvH
nIi4Ner9TKx9RiXqLinpJ8EKLYrBwq2SWhg9r6kvy0SRsRkjhyk23/iTCq9FOoVr
/zqa7W4NdUueKyh5bwFQ7mcZ60/1dH1cJy6UXivBs9Wowoktq11jGdLLIXZbxxhe
s4V1IKKTNgrtiBwz2RkvH+RUIKTij+0HjTZQ3RarxyUCc8PUJ9oOPbcI/gTGfsXa
0SKsZWIVQwPg6k0lW803pc1YeE6KMr/93yHGnxionPtVcRbJgu1MiHccFuc0AWzz
uB4ZKHiQyiAqnw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:15 2025 by rpki-client